BayMark Health Services Data Breach Investigation
The data breach lawyers at The Lyon Firm are reviewing an alleged data security incident reported at BayMark Health Services, one the largest substance use disorder (SUD) treatment and recovery services in the country. Contact our attorneys if you have received a data breach notification letter from the company.
Our legal team offers free consultations and case reviews, and we can not only assist you in filing a class action data breach lawsuit, but also help you learn more about how to protect yourself following a data theft event. It is important to know the risks of medical identity theft and fraud, and how to mitigate the damages. Call now to speak with our attorneys.
What Happened at BayMark Health Services?
There are several unknowns, and more details will emerge in the coming weeks, but we do know that some number of patients had their personal and health information stolen in a September 2024 BayMark data breach.
BayMark Health announced on their website that it had experienced a data breach in which sensitive personal identifiable information and protected health information may have been accessed and leaked. According to the notice, BayMark learned of an IT hacking incident in October 2024 that disrupted the operations.
The Lewisville, Texas healthcare service provider has not provided further details about the cyberattack. However, the RansomHub ransomware gang claimed the breach in October, saying it stole 1.5TB of files from Baymark’s compromised systems. The RansomHub ransomware-as-a-service (RaaS) operation has focused in the past on data-theft extortion schemes, and has claimed responsibility for multiple data theft incidents, including targeting Rite Aid.
After an investigation, BayMark confirmed that sensitive personal information belonging to patients may have been compromised between September 24, 2024, and October 14, 2024. The type of information potentially exposed could include:
- Name
- Social Security number
- Date of birth
- Driver’s license number
- Medical/clinical information
- Insurance information
BayMark Health posted a notice of the incident, and on January 8, 2025, they began mailing breach notification letters to all impacted individuals. The organization, operating out of Texas, provides services targeting both substance use and mental health disorders to more than 75,000 patients. BayMark offers opioid treatment programs (OTP), office-based opioid treatment (OBOT) practices, outpatient and inpatient detox services, residential treatment centers, and behavioral health services.